Enhancing Deep Learning Based IDS Adversarial Robustness With Causal Inference
Deep Learning models are increasingly employed in mission-critical security systems, but remain vulnerable to adversarial attacks due to out-of-distribution (OOD) inference biases. These biases arise from spurious correlations in training data, an issue exacerbated by the use of synthetic datasets. To address these concerns, we propose an algorithm leveraging causal inference to identify and transform spurious features. We test our algorithms to two deep learning based IDS, and experimentally demonstrate enhancing both model robustness and performance against highly aggressive adversarial attacks. All data and algorithms presented in this paper are available in the replication package<sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">1</sup>.<sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">1</sup>see https://github.com/mbdlrocks/PhD_Replication_Package/tree/master/Causal-Hidden-Markov-Model%20(CHMM)
Authors
- Myriam Mérad (ORCID: https://orcid.org/0000-0002-8186-581X)
- Marin François (ORCID: https://orcid.org/0000-0001-5661-8131)
- Pierre-Emmanual Arduin
Institutions
- Centre National de la Recherche Scientifique (FR)
- Université Paris Dauphine-PSL (FR)
Publication Details
- Published
- 2025-08-04
- DOI
- https://doi.org/10.1109/csr64739.2025.11130144
- Primary Topic
- Adversarial Robustness in Machine Learning
- Type
- article
- Field-Weighted Citation Impact
- 0.00